The Muen Separation Kernel is the world's first Open Source microkernel that has been formally proven to contain no runtime errors at the source code level. It is developed in Switzerland by the Institute for Internet Technologies and Applications (ITA) at the University of Applied Sciences Rapperswil (HSR). Muen was designed specifically to meet the challenging requirements of high-assurance systems on the Intel x86/64 platform. To ensure Muen is suitable for highly critical systems and advanced national security platforms, HSR closely cooperates with the high-security specialist secunet Security Networks AG in Germany.

The webpage contains instructions for building the kernel yourself, for installing it in a virtual machine, and for running it on real hardware.

This argument has been going on for DECADES, by stupid people who need money to keep their stupid cash donors convinced of the "benefits" and "possibilities" without anything going anywhere and no research to show for it.

In short, we need money to write more papers and buy chicken.

This is how I look at it:

You cannot define a system of logic that is not capable of self contradiction.

So first of all, you cannot have a formalism in Computer Science that will yield a perfect program.

It will NEVER happen.

This problem was solved and put to rest by men that are far more brilliant than those born today with corn syrup, anti depressants and rittalin stringing through their brains with the attention span of a teetse fly.

Secondly from a pragmatic sense, you have two, and ONLY two camps to choose from in this debate if we are talking about Von Neumann machines:

1) Subsequent problems with error in OS kernel execution is something that the hardware must protect against, and so must the formalized logic of the execution of the kernel.

or this camp, which is where I am in:

2) OS kernel problems with error in execution is a tools and engineering problem. The OS should remain simple for hardware as much as possible.

It should be clear why #2 is superior in cost, engineering and portability to the simplest hardware designs from pacemakers to the worlds largest super computers.

They all run one operating system, one MONOLITHIC OS KERNEL, and it isLINUX.
(Those that do not, are quaint.)

You will NEVER product a Micokernel that can straddle cost, performance and engineering as a result of #2.

And no hardware manufacturer would dare risk their balance sheets betting against Goedel's theorem.

End of Discussion and stay away from MicroKernels on Von Neumann machines.